58b693b0c7f3a4112d1c0931daa3605ae3ba314a5d73f1f16859ac72b87db9af

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 16:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Video Packer 10.0/help.chm
Size

13KB
MD5

d5983513a8a35eb47fe4d08b92716f62
SHA1

3a4c2638052ee435750b41628989356b0303efeb
SHA256

f1d1cb1b6230adae3d3c1b16e3f713297e4f686816518a322983997ec407792a
SHA512

1bcef29e11b460723fe0300f78ea3d89a03acc9b04c9da005d9bf423a6396c8624df2b0f6c8d35e16ae885e0d06694237d54fd5dab84c1028b3b9f492bf2c966
SSDEEP

192:fwjRXV5iL995u0UsQXVvuVOhR0K/uL9sE6rYm8kBd:fwjRX2L9isCVW8H0EuL2TYS

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main	hh.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2848	hh.exe
2848	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" "C:\Users\Admin\AppData\Local\Temp\Video Packer 10.0\help.chm"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2848-17-0x000007FFFFF90000-0x000007FFFFFA0000-memory.dmp

Filesize
64KB

Download